General

  • Target

    202fa11a01c289d41154e245169b41d3d412ae92c646a49e15d2ad1da7596653

  • Size

    251KB

  • Sample

    221003-sv2t5scge2

  • MD5

    6ac9a7c60d164366178d0c61a449a451

  • SHA1

    734af75a6eaf3a4ea635a9d843cedd75c122f51f

  • SHA256

    202fa11a01c289d41154e245169b41d3d412ae92c646a49e15d2ad1da7596653

  • SHA512

    c9d61c840cc8bf8020a85aa104b9aae48d84daae5219478dc02c718c07d1d7b106fc9668a4263755f0a1d97ccd23b477d8e4876ce4410cd6aa7d38101b1b4559

  • SSDEEP

    6144:91OgDPdkBAFZWjadD4sMlMUnuau8HrsoXlMEp:91OgLda7MUnju8LsYnp

Malware Config

Targets

    • Target

      202fa11a01c289d41154e245169b41d3d412ae92c646a49e15d2ad1da7596653

    • Size

      251KB

    • MD5

      6ac9a7c60d164366178d0c61a449a451

    • SHA1

      734af75a6eaf3a4ea635a9d843cedd75c122f51f

    • SHA256

      202fa11a01c289d41154e245169b41d3d412ae92c646a49e15d2ad1da7596653

    • SHA512

      c9d61c840cc8bf8020a85aa104b9aae48d84daae5219478dc02c718c07d1d7b106fc9668a4263755f0a1d97ccd23b477d8e4876ce4410cd6aa7d38101b1b4559

    • SSDEEP

      6144:91OgDPdkBAFZWjadD4sMlMUnuau8HrsoXlMEp:91OgLda7MUnju8LsYnp

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v6

Tasks